Mirrors/go-chasquid-smtp
1
0
Fork 0
mirror of https://blitiri.com.ar/repos/chasquid synced 2026-01-09 17:55:57 +00:00
Code Releases Activity

Add checks to prevent unauthorized relaying and impersonation

Browse Source 
This patch adds checks that verify:

 - The envelope from must match the authenticated user. This prevents
   impersonation at the envelope level (while still allowing bounces, of
   course).
 - If the destination is remote, then the user must have completed
   authentication. This prevents unauthorized relaying.

The patch ends up adjusting quite a few tests, as they were not written
considering these restrictions so they have to be changed accordingly.
This commit is contained in:
Alberto Bertogli
2016-09-12 06:08:53 +01:00
parent 941eb9315c
commit e2fdcb3705
9 changed files with 131 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
test/t-01-simple_local/msmtprc
View File

@@ -1,7 +1,7 @@
account default
host testserver
port 1025
port 1587
tls on
tls_trust_file config/domains/testserver/cert.pem
@@ -12,6 +12,9 @@ auth on
user user@testserver
password secretpassword
account smtpport : default
port 1025
account baduser : default
user unknownuser@testserver
password secretpassword